case is bit strange, as per user info FDE was enabled on the drive they do have valid credentials. Something happen and user profile got corrupted, strange thing for me is that they was able to copy all data to an other drive, they just checked C drive data, e.g desktop, documents and it was working so they assumed rest of the data is working too. They install a new windwos and when they restore all backup back to the drive, they came to know that only C Drive data is working rest is not. there are 2 more partitions which data is required.

Mostly office data, word, excel, pdf, ppt and pictures, all file's headers has same pattern which seems that they are still encrypted.

Who is online

Users browsing this forum: No registered users and 2 guests

You cannot post new topics in this forumYou cannot reply to topics in this forumYou cannot edit your posts in this forumYou cannot delete your posts in this forumYou cannot post attachments in this forum